292 matches found
Linux kernel denial of service vulnerability (CNVD-2017-06741)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability in the handleinvept function in arch/x86/kvm/vmx.c in Linux kernel 3.12 through 3.15 allows users of a privileged KVM client operating system...
DEBIAN-CVE-2017-2596
The nestedvmxcheckvmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service host OS memory consumption by leveraging the mishandling of page references...
PT-2017-1185 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.8 Description: The issue is related to errors in resource management in the nested vmx check vmptr function of the Linux operating system. This can be exploited by a local attacker to cause a denial of...
Linux Kernel 'arch/x86/kvm/vmx.c' Denial of Service Vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel is prone to denial of service vulnerabilities. An attacker can exploit the vulnerability to cause a denial of service...
xen-kernel -- x86 task switch to VM86 mode mis-handled
The Xen Project reports: LDTR, just like TR, is purely a protected mode facility. Hence even when switching to a VM86 mode task, LDTR loading needs to follow protected mode semantics. This was violated by the code. On SVM AMD hardware: a malicious unprivileged guest process can escalate its...
Juniper Junos vMX 14.1 < 14.1R8 / 15.1 < 15.1F5 Local Information Disclosure (JSA10766)
According to its self-reported version number and architecture, the remote Juniper Junos vMX Virtual MX Series router is 14.1 prior to 14.1R8 or 15.1 prior to 15.1F5. It is, therefore, affected by a local information disclosure vulnerability due to the use of incorrect permissions. A local attack...
Juniper vMX Local Security Bypass Vulnerability
Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A local security bypass vulnerability exists in Juniper vMX, which could allow an attacker to bypass security...
Juniper Networks Junos OS vMX Information Leak Vulnerability
Junos OS on vMX is prone to an information leak vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...
The vulnerability of VMWare Player’s software allows a malicious individual to compromise the accessibility of protected information.
The vulnerability in VMware Workstation, VMware Player, VMware Fusion, VMware ESXi, and VMware ESX allows users of these guest operating systems to trigger a service failure VMX process crash by using an invalid port...
Code injection
arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of service host OS crash or possibly execute arbitrary code on the host OS, via x2APIC mode...
安宁VMX反垃圾网关系统 /gateadmin/logins.php 参数F_admin SQL注入漏洞
0x01漏洞简介 安宁VMX反垃圾网关系统在/gateadmin/logins.php对参数Fadmin过滤不严格，导致出现POST注入漏洞。远程攻击者可以利用回显注入的方式执行SQL指令。 0x02漏洞证明 POST /gateadmin/logins.php HTTP/1.1 Host: ... Content-Length: 72 Cache-Control: max-age=0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Origin: ... User-Agen...
The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure
The vulnerability of the VMX component of the Xen hypervisor is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker, operating locally, to cause a service failure by engaging in actions related to the RIP protocol...
Fedora 22 : xen-4.5.2-7.fc22 (2016-e1784417af)
PV superpage functionality missing sanity checks XSA-167, CVE-2016-1570 VMX: intercept issue with INVLPG on non-canonical address XSA-168, CVE-2016-1571 Qemu: pci: NULL pointer dereference issue CVE-2015-7549 qemu: DoS by infinite loop in ehciadvancestate CVE-2015-8558 qemu: Heap-based buffer...
Fedora 23 : xen-4.5.2-7.fc23 (2016-2c15b72b01)
PV superpage functionality missing sanity checks XSA-167, CVE-2016-1570 VMX: intercept issue with INVLPG on non-canonical address XSA-168, CVE-2016-1571 Qemu: pci: NULL pointer dereference issue CVE-2015-7549 qemu: DoS by infinite loop in ehciadvancestate CVE-2015-8558 qemu: Heap-based buffer...
FreeBSD : xen-kernel -- VMX: intercept issue with INVLPG on non-canonical address (80adc394-ddaf-11e5-b2bd-002590263bf5)
The Xen Project reports : While INVLPG does not cause a General Protection Fault when used on a non-canonical address, INVVPID in its 'individual address' variant, which is used to back the intercepted INVLPG in certain cases, fails in such cases. Failure of INVVPID results in a hypervisor bug...
FreeBSD : xen-kernel -- VMX: guest user mode may crash guest with non-canonical RIP (81f9d6a4-ddaf-11e5-b2bd-002590263bf5)
The Xen Project reports : VMX refuses attempts to enter a guest with an instruction pointer which doesn't satisfy certain requirements. In particular, the instruction pointer needs to be canonical when entering a guest currently in 64-bit mode. This is the case even if the VM entry information...
CVE-2016-2271
VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service guest crash via vectors related to a non-canonical RIP...
Design/Logic Flaw
VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service guest crash via vectors related to a non-canonical RIP...
